Exercises

Exercise Avg. Time Difficulty Solved by Tier
CVE-2025-XX149
This challenge covers the review of a CVE in a Python codebase and its patch
< 1 Hr. hard 183 PRO
CVE-2025-6XX4
This challenge covers the review of a CVE published in 2025 in a go codebase and its patch
< 1 Hr. hard 83 PRO
CVE-2025-5X3X9
This challenge covers the review of a CVE discovered in 2025 in a golang codebase and its patch
< 1 Hr. hard 103 PRO
CVE-2024-47081 < 1 Hr. medium 33 PRO
CVE-2024-433XX
This challenge covers the review of a CVE in a Python codebase and its patch
< 1 Hr. hard 191 PRO
CVE-2023-3219X
This challenge covers the review of a CVE in a Golang project and its patch
< 1 Hr. hard 102 PRO
CVE-2025-4913X
This challenge covers the review of a CVE in a Go codebase and its patch. The goal is to review the code to find the security issue.
< 1 Hr. hard 97 PRO
CVE-2024-419XX
This challenge covers the review of a CVE in a Python codebase and its patch
< 1 Hr. hard 242 PRO
CVE-2025-3X5X
This challenge covers the review of a CVE in a Golang project
< 1 Hr. hard 85 PRO
SAML: CVE-2025-25291
This exercise covers the exploitation of CVE-2025-25291 (impacting ruby-saml)
2-4 Hr. hard 26 PRO
SAML: CVE-2025-29775 Signed Metadata
This exercise covers the exploitation of CVE-2025-29775 (impacting xml-crypto) without XMLResponse
2-4 Hr. hard 21 PRO
CVE-2025-XX95X
This challenge is part of our go code review challenges designed to teach you security code review by reviewing patches
< 1 Hr. hard 113 PRO
CVE-2019-X03X
This challenge covers the review of a CVE in a golang codebase and its patch
< 1 Hr. hard 108 PRO
CVE-2019-379X
This challenge is part of our golang code review challenges designed to teach you security code review by reviewing patches
< 1 Hr. hard 163 PRO
CVE-2024-6X3X
This challenge covers the review of a CVE (original vulnerable code and diff) of a real go codebase
< 1 Hr. hard 102 PRO
SAML: CVE-2025-29775
This exercise covers the exploitation of CVE-2025-29775 (impacting xml-crypto)
1-2 Hr. hard 29 PRO
CVE-2022-37X1
This challenge covers the review of a CVE in a go codebase and its patch
< 1 Hr. hard 121 PRO
CVE-2023-XX463
This challenge covers the review of a CVE in a Go codebase and its patch
< 1 Hr. hard 115 PRO
CVE-2024-X5X87
This challenge covers the review of a CVE in a go codebase and its patch
< 1 Hr. hard 119 PRO
CVE-2022-XX975
This challenge covers the review of a CVE in a Go codebase and its patch
< 1 Hr. hard 124 PRO
CVE-2024-X90X6
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 148 PRO
CVE-2022-X10X8
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 167 PRO
CVE-2022-2X8XX
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 186 PRO
CVE-2024-2791X
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 135 PRO
CVE-2023-51XX2
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 151 PRO
CVE-2022-X87X
This challenge covers the review of a CVE in a Golang codebase and its patch
< 1 Hr. hard 143 PRO
CVE-2024-X3X06
This challenge covers the review of a CVE in a Go codebase and its patch
< 1 Hr. hard 134 PRO
CVE-2023-X5821
This challenge covers the review of a CVE in a Go codebase and its patch
< 1 Hr. hard 128 PRO
CVE-2022-4x3x5
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. hard 207 PRO
CVE-2023-3X4X6
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. hard 244 PRO
1 2 3 4 5 6 7
Showing 61–90 of 193 exercises